This morning, I enabled slowlogs on a bunch of indices in my cluster by issuing something like this <https://gist.github.com/tdhopper/a44cc4200b9c09aea389>. Because I set the threshold at 0 and we're doing lots of reads and writes, I got large logs rather quickly. I decided to raise the thresholds and delete the logs manually from all four machines on my cluster; I did this without restarting the cluster. After doing this, no new *slowlog.log files were created. I tried 'touch'ing the appropriate paths, but those files were not populated.
I have since set the slowlog thresholds manually in my ElasticSearch.yml file index.search.slowlog.threshold.query.warn: 10s index.search.slowlog.threshold.query.info: 5s index.search.slowlog.threshold.query.debug: 2s index.search.slowlog.threshold.query.trace: 0s index.search.slowlog.threshold.fetch.warn: 10s index.search.slowlog.threshold.fetch.info: 5s index.search.slowlog.threshold.fetch.debug: 2s index.search.slowlog.threshold.fetch.trace: 0s index.indexing.slowlog.threshold.index.warn: 10s index.indexing.slowlog.threshold.index.info: 5s index.indexing.slowlog.threshold.index.debug: 2s index.indexing.slowlog.threshold.index.trace: 0s and restarted the cluster. The log files still were not populated. I again issued a curl command to set the thresholds to 0ms, and I also set 'additivity.index.search.slowlog' and 'additivity.index.indexing.slowlog' to 'true' for the cluster (though I'm not entirely clear on what those do). Still no logs. I have also tried fiddling with the log level with a command like this <https://gist.github.com/tdhopper/2dc0d2aa039f3dd598ab>. I've uncovered two <http://stackoverflow.com/questions/23195280/elasticsearch-slow-log-wont-write-to-log-file> SO questions <http://stackoverflow.com/questions/23899327/elasticsearch-wont-log-slow-queries-anymore> that seem to have similar problems that have not been resolved. Have I done something wrong that is preventing these logs from appearing? I am using 1.3.0. -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/54d753c1-e9a5-4116-ac5c-0c8edd3a392b%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
